The problem of automatically finding security policies has been studied using concepts and methods from different fields, most notably: statistics (see example [1]}), control theory (see survey [2]}), game theory (see textbook [3]}), artificial intelligence (see survey [4]}), dynamic programming (see example [5]}), reinforcement learning (see survey [6]}), evolutionary methods (see example [7]}), and attack graphs (see example [8]}).
